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- The MAILING DATE of this communication appears on the cover sheet with the correspondence address — 

THE SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE ONE MONTH OR THIRTY (30) DAYS, 
WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

This time period for reply is NOT extendable under 37 CFR 1.136(a). This communication constitutes notice 
under 37 CFR 1.136(a)(1)(i). 

To avoid abandonment of the application, applicant must, within this time period for reply, file: 

(1) A letter requesting not to have a first-action interview, or 

(2) A completed Applicant Initiated Interview Request Form (PTOL-413A) accompanied by a proposed amendment 
or arguments. 

Inventor participation in the Pre-First Action Interview is encouraged if it would expedite resolution of the application. 

Disposition of Claims 

3) ^ Claim(s) 1-20 is/are pending in the application. 

3a) Of the above claim(s) is/are withdrawn from consideration. 

4) \Z\ Claim(s) appear to be allowable. 

5) ^ Claim(s) 1-20 appear to be rejectable. 

6) Q Claim(s) may be subject to an objection. 

7) Q Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

8) D The specification may be subject to an objection by the Examiner. 

9) Q The drawing(s) filed on is/are: a)\Z\ accepted or b)\Z\ may be subject to an objection by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 
10)O The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

1 1 )0 Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 1 9(a)-(d) or (f). 
a)D All b)Q Some * c)Q None of: 

1 .Q Certified copies of the priority documents have been received. 

2. Q Certified copies of the priority documents have been received in Application No. . 

3. Q Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
*See the attached detailed Office action for a list of the certified copies not received. 

Contact Information 

Examiner's Telephone Number: 571-272-3977 
Examiner's Typical Work Schedule: 8am-4pm 
Supervisor's Name: Nathan Flynn 
Supervisor's Telephone Number: 571-272-1915 

Attach ment(s) 

1 ) ^ Notice of References Cited (PTO-892) 

2) O Notice of Draftsperson's Patent Drawing Review (PTO-948) 

3) O Information Disclosure Statement(s) (PTO/SB/08) 

Paper No(s)/Mail Date . 



4) O Interview Summary (PTO-41 3) 

Paper No(s)/Mail Date. . 

5) O Notice of Informal Patent Application 

6) □ Other: . 
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Notification of Potential Rejection(s) and/or Objection(s) 



Claim(s) 



Reference(s) 
(if applicable) 



Rejection 
Statutory Basis 



Brief Explanation of Potential Rejection 



103(a) 



Reference D discloses claim 1: storing data handling policy and a role (see par. 19, 27); 
implementing the data handling policy (see par. 28-30); and providing access to data 
handling pocily to a person, i.e., administrator (see par. 27). (see contin. below) 



2,3 



103(a) 



Reference D teaches granting the user unrestricted access to shared data, i.e., data 
generated by other users (see par. 30). It is noted that such data would include any types of 
data generated by one or more users. 



4,7 



103(a) 



Reference D teaches allowing more than one person to change the data handling policy (see 
par. 27, 31). 



103(a) 



It is noted that some data handling policies (security) would have required users to be 
notified of the existence of the policy, e.g., prompting users to change passwords, selecting 
an encryption methods, etc., (see par. 22-23). 



9-20 



103(a) 



Rejected for the same rationale set forth for claims 1-8. 



Expanded Discussion/Commentary 



Reference D does not explicitly teach allowing a person to view data handling policy. Such viewing however would have been obviously 
1 included in the step of implementing the policies such as prompting user to enter/select security measure including passwords, encryption 

methods, etc. (see par. 21-25). 
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